Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa
File:                     1034457c-db53-3d98-8538-76536f27c62e.roa (raw, json)
Hash identifier:          TTwxPq4xDgoer2QLSaNK8yYKuHIGeHWG6KL6Zp3nDfM=
Subject key identifier:   DA:A9:F9:99:B1:ED:5D:50:9D:77:54:F9:7B:F9:27:96:1F:29:E3:36
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584F4F07F5FA01DEC6AC58259C00
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     26077
IP address blocks:        192.104.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f5:fa:01:de:c6:ac:58:25:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=dc7fd8f7-21b1-4ed0-9729-fe8d833b397d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:3c:4e:3d:77:e3:75:13:15:0a:a5:f5:4e:
                    79:ba:a1:b3:44:eb:25:00:12:89:14:c6:c0:58:77:
                    48:54:7c:42:32:8a:38:51:64:e6:ff:0c:61:58:4e:
                    53:8d:46:9e:54:71:50:82:8b:b4:0f:be:01:3c:45:
                    8c:c8:83:f5:0e:47:f2:61:a2:6d:9a:e8:2d:8c:99:
                    af:0e:87:1c:4d:bf:1a:c1:58:dc:5d:6f:97:fa:8c:
                    20:cf:18:f4:0e:86:91:08:3b:f5:af:18:0b:c3:a8:
                    48:8c:55:dc:f5:47:2d:34:96:dd:41:42:3c:b0:21:
                    29:9a:b2:f0:41:80:f8:58:d8:13:d4:6d:ef:2a:03:
                    dc:d4:3d:80:49:86:a0:cd:d3:14:e8:9f:37:ba:cf:
                    5e:21:f5:66:12:32:c7:6f:a7:99:56:43:65:d6:c4:
                    be:95:ff:74:a8:f7:78:5d:0c:6b:5d:9b:b3:20:c9:
                    65:ff:b2:31:8c:88:4a:50:69:af:52:36:1b:20:bf:
                    ef:e1:95:fc:cf:19:dd:db:f8:84:03:3d:a6:f3:f1:
                    50:63:b1:f0:d4:e5:fb:38:ba:a5:63:81:da:42:7b:
                    ae:9c:b8:a4:3a:2d:e5:15:b9:df:7e:db:66:3d:84:
                    de:19:20:f8:a3:a9:94:3e:11:28:d9:ee:18:1b:e8:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A9:F9:99:B1:ED:5D:50:9D:77:54:F9:7B:F9:27:96:1F:29:E3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:e1:ae:9e:3a:88:c9:0e:fe:00:0d:6c:0b:99:ae:27:66:
         99:03:59:95:51:f7:d3:41:f8:8c:4d:a8:b9:a6:0b:50:9c:69:
         a0:ba:4a:ca:d4:15:9f:a4:1e:ea:82:fc:72:70:41:af:e3:eb:
         8f:cb:de:12:de:ef:a4:4f:ee:bf:3b:59:9e:87:18:b4:42:c8:
         bb:5b:e1:d7:d9:83:02:b7:df:26:44:16:55:23:b0:03:0b:be:
         df:d8:86:32:67:99:01:7a:7a:6c:0a:04:bd:b9:aa:b2:1b:e8:
         51:20:76:b9:19:73:a8:9a:b4:aa:1a:e5:97:c0:01:f5:51:18:
         74:06:e2:5f:25:d6:67:8a:b8:cd:f3:21:a4:c8:f9:98:01:f7:
         67:7d:9c:65:da:ed:18:f2:5b:e2:ba:ae:3b:c8:ec:98:46:96:
         9e:52:fa:1e:de:ab:e9:e3:ef:da:77:da:ec:c9:8f:66:15:22:
         bb:f6:25:a0:8d:d8:74:ef:37:0b:9d:68:f0:4b:97:a7:44:0d:
         88:d8:8b:1b:80:c4:65:e6:84:ef:51:b3:06:70:67:af:37:43:
         fb:00:44:42:d1:14:fc:bb:06:f3:60:75:80:90:5e:6f:55:4d:
         20:1e:17:d1:f6:4a:35:12:c0:68:e8:25:8a:e4:d5:29:cb:85:
         3b:e4:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:23:50 2026 by rpki-client